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DETAILED ACTION 

Response to Arguments 

1 . Applicant's arguments, see pages 17-20, filed on 4/12/2007, with respect to the objection 
to the specification and the 35 USC 101 rejection of claims 1-63 have been fully considered and 
are persuasive as amended. The objection to the specification and the rejection under 35 USC 
101 of claims 1-63 have been withdrawn. In communications filed on 4/12/2007, Applicant has 
amended claims 1, 2, 5, 6, 9, 10, 13, 14, 16, 22, 30-48, 50-54, 56, 58-63. Claims 1, 2, 5, 6, 9, 10, 
and 13-63 are presented for examination. 

1 . 1 Applicant's remarks pages 1 7-20 filed on 4/1 2/2007 with respect to the art rejection of 
claims 1-12 have been fully considered but they are moot in view of a new ground of rejection. 
A new ground of rejection of claims 1, 2, 5, 6, 9, 10, and 13-63 is set forth below. 

Allowable Subject Matter 

2. The indicated allowability of claims 13-60 is withdrawn in view of the newly discovered 
reference(s) to Gerhard Frey, Michael Muller, and Hans-Georg Ruck; "Remark concerning m- 
Divisibility and the Discrete Logarithm in the Divisor Class Group of Curves" and Barreto et al 
"Efficient Algorithms for Pairing-Based Cryptosy stems". Rejections based on the newly cited 
reference(s) follow. 



Information Disclosure Statement 



Application/Control Number: 10/628,729 Page 3 

Art Unit: 2136 

3. The information disclosure statement (IDS) submitted on 1/1 7/2007 and 5/1 8/2007 is 
being considered by the examiner. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 

Claims 1, 2, 5, 6, 9, 10, 13-15, 29-32, 46-49, and 63 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Non-Patent Literature to Gerhard Frey, Michael Muller, and Hans- 
Georg Ruck; "The Tate Pairing and the Discrete Logarithm Applied to Elliptic Curve 
Cryptosystems" IEEE TRANSACTIONS ON INFORMATION THEORY, VOL. 45, NO. 5, 
JULY 1999; Pages 1717-1719 (hereinafter Dl) in view of Non-Patent Literature to Gerhard 
Frey, Michael Muller, and Hans-Georg Ruck; "Remark concerning m-Divisibility and the 
Discrete Logarithm in the Divisor Class Group of Curves"; Pages 865-874 (hereinafter D2) 
(Applicant IDS). 
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As per claim 1, Dl substantially teaches a method comprising: determining at least one 
Squared Tate pairing for at least one hyper elliptic curve (see page 1719, left column first two 
paragraphs) showing computation of Tate pairing for a hyperelliptic curve as mentioned on (see 
page 1718, left column, last paragraph prior to part II). Dl discloses using the Tate Pairing for 
computation of discrete logarithm which can be interpreted as a cryptographic process (see page 
1718, right column, Remark 2.4 first paragraph) and further discloses that the improved Tate 
Pairing can be used to reduce the discrete logarithm problem for elliptic curves (see page 1719, 
right column, paragraph 1). Dl suggests using the Tate pairing in cryptographic applications in 
which the Weil Pairing does not work (see page 1718, left column, part II, Remark 2.2) as 
explained in more details by Menezes et al in "Reducing Elliptic Curve Logarithms to 
Logarithms in a Finite Field", also (Applicant's IDS). Dl discloses wherein determining said 
Squared Tate pairing further includes: forming a mathematical chain for m, wherein m is a 
positive integer and an m-torsion element D is fixed on Jacobian of said hyperelliptic curve C 
(see pages 1717-1718, part I). (Page 1718, right column, last paragraph shows m=p k which 
meets the recitation of a mathematical chain as interpreted by Examiner). Dl does not explicitly 
disclose wherein said mathematical chain includes a mathematical chain selected from a group of 
mathematical chains comprising an addition chain and an addition-subtraction chain. However, 
D2 in an analogous art discloses using Tate pairing for reducing the computation of discrete 
logarithm in the m-torsion part divisor class groups of hyperelliptic curve (see abstract). D2 
discloses "The divisor is the form A-g(P 0 ), where A is an effective divisor of degree g and A is 
given as the sum of Pi from i to g of Pi and the points Pi are rationale over a finite extension of 
k 0 of degree g" (page 865) and discloses " a function h on Xo such that the divisor of h is equal 
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to Al + A2 - A3 - gPo. Each element in Pico(Xo) has a representative of the form sum (i to g) of 
Pi - gPo, where Pi are points on Xo which are rational over an extension lo of ko of the fixed 
degree g" (see pages 866-867). This meets the recitation of determining said Squared Tate 
pairing forming a mathematical chain for m wherein said mathematical chain includes a 
mathematical chain selected from a group of mathematical chains comprising an addition chain 
and an addition-subtraction chain (see D2, Results, pages 866-867 and page 869, paragraphs 2- 
3, and page 869. Therefore, it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to include a mathematical chain selected from a group of 
mathematical chains comprising an addition chain and an addition-subtraction chain so as to 
reduce computation as suggested by D2 (see abstract). Dl does not explicitly state 
cryptographically processing selected information based on Tate Pairing. Examiner takes 
official notice that elliptic curves and Tate Pairing have been very well known in the art of 
cryptography to be used in Public Key Cryptography and "identity-based key exchange and 
signature schemes" (known for secure encryption and authentication) as disclosed in several of 
Applicant's IDS such as Menezes' publication and Galbraith et al "Implementing Tate Pairing". 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the invention 
was made to apply the concept of Frey et al as disclosed in Dl and D2 in cryptography 
application for cryptographically processing selected information and determining course of 
action in response to validation of selected information. One of ordinary skill in the art would 
have recognized the advantages of reducing computation in cryptosystems to implement Tate 
Pairing for finding groups of points on an elliptic curve to construct public key cryptosystems for 
identity-based key exchange and signature schemes as known in the art. 
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As per claim 2, Dl discloses computing Tate Pairing for a hyperelliptic curve over a 
field F (see pages 1717-1718, part I) that meets the recitation of wherein said Squared Tate 
pairing is defined for at least one hyperelliptic curve C of genus g over a field K (see page 1718, 
left column, last paragraph prior to part II), a hyperelliptic curve by definition has a genus g. 

As per claims 5-6, claims 5-6 recite the same limitations as claims 1-2 respectively 
except for implementing the claimed method into a storage medium. Dl discloses (page 1719, 
part III first paragraph) using a computer to implement the Tate Pairing. Therefore claims 5-7 
are rejected on the same rationale as the rejection of claims 1-3. 

As per claim 9, Dl substantially teaches an apparatus (computer) comprising memory 
configured to store information suitable for use with using a cryptographic process; logic 
operatively coupled to said memory and configured to calculate at least one Squared Tate pairing 
(see page 1719, part III first paragraph) for at least one hyperelliptic curve (see page 1719, left 
column first two paragraphs) showing computation of Tate pairing for a hyperelliptic curve as 
mentioned on (see page 1718, left column, last paragraph prior to part II). Dl discloses using the 
Tate Pairing for computation of discrete logarithm, which can be interpreted as partially support 
cryptographic processing (see page 1718, right column, Remark 2.4 first paragraph) and further 
discloses that the improved Tate Pairing can be used to reduce the discrete logarithm problem for 
elliptic curves (see page 1719, right column, paragraph 1). Dl discloses wherein determining 
said Squared Tate pairing further includes: forming a mathematical chain for m, wherein m is a 
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positive integer and an m-torsion element D is fixed on Jacobian of said hyperelliptic curve C 
(see pages 1717-1718, part I). (Page 1718, right column, last paragraph shows m=p k which 
meets the recitation of a mathematical chain as interpreted by Examiner). Dl does not explicitly 
disclose wherein said mathematical chain includes a mathematical chain selected from a group of 
mathematical chains comprising an addition chain and an addition-subtraction chain. However, 
D2 in an analogous art discloses using Tate pairing for reducing the computation of discrete 
logarithm in the m-torsion part divisor class groups of hyperelliptic curve (see abstract). D2 
discloses "The divisor is the form A-g(P 0 ), where A is an effective divisor of degree g and A is 
given as the sum of Pi from i to g of Pi and the points Pi are rationale over a finite extension of 
ko of degree g" (page 865) and discloses 66 a function h on Xo such that the divisor of h is equal 
to Al + A2 - A3 - gPo. Each element in Pico(Xo) has a representative of the form sum (i to g) of 
Pi - gPo, where Pi are points on Xo which are rational over an extension lo of ko of the fixed 
degree g" (see pages 866-867). This meets the recitation of determining said Squared Tate 
pairing forming a mathematical chain for m wherein said mathematical chain includes a 
mathematical chain selected from a group of mathematical chains comprising an addition chain 
and an addition-subtraction chain (see D2, Results, pages 866-867 and page 869, paragraphs 2- 
3, and page 869). Therefore/it would have been obvious to one of ordinary skill in the art at the 
time the invention was made to include a mathematical chain selected from a group of 
mathematical chains comprising an addition chain and an addition-subtraction chain so as to 
reduce computation as suggested by D2 (see abstract). Dl does not explicitly state 
cryptographically processing selected information based on Tate Pairing. Examiner takes 
official notice that elliptic curves and Tate Pairing have been very well known in the art of 
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cryptography to be used in Public Key Cryptography and "identity-based key exchange and 
signature schemes" (known for secure encryption and authentication) as disclosed in several of 
Applicant's IDS such as Menezes' publication and Galbraith et al "Implementing Tate Pairing". 
Therefore, it would have been obvious to one of ordinary skill in the art at the time the invention 
was made to apply the concept of Frey et al as disclosed in Dl and D2 in cryptography 
application for cryptographically processing selected information and determining course of 
action in response to validation of selected information. One of ordinary skill in the art would 
have recognized the advantages of reducing computation in cryptosystems to implement Tate 
Pairing for finding groups of points on an elliptic curve to construct public key cryptosystems for 
identity-based key exchange and signature schemes as known in the art. 

As per claim 10, Dl discloses computing Tate Pairing for a hyperelliptic curve over a 
field F (see pages 1717-1718, part I) that meets the recitation of wherein said Squared Tate 
pairing is defined for at least one hyperelliptic curve C of genus g over a field K (see page 1718, 
left column, last paragraph prior to part II), a hyperelliptic curve by definition has a genus g. 

As per claim 13, Dl substantially discloses determining a hyperelliptic curve E of genus 
g over a field F and a positive integer m (see pages 1717-1718, part I), Dl discloses determining 
a Jacobian J(C) of said hyperelliptic curve E (see page 1718, part I), and evaluating tate pairing 
on page 1718, column 2, first five paragraphs). Dl is silent as to wherein each element D of J(E) 
contains a representative of the form A-g(P 0 ), but suggests that computation in the case that J is 
the Jacobian can be used effectively using Riemann-Roch theorem (see page 1718, left column, 
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last paragraph prior to part II). D2 in an analogous art discloses determining a hyperelliptic curve 
Xo of genus g over a field K and a positive integer m (see pages 865-866) which meets the 
recitation of determining a hyperelliptic curve C of genus g over a field K and a positive integer 
m; D2 discloses determining a Jacobian J(C) of said hyperelliptic curve C, and wherein each 
element D of the curve Xo contains a representative of the form A-g(Po), where A is an effective 
divisor of degree g (see page 867, first paragraph); and discloses determining a plurality of 
functions hi,o that are iterative building blocks for the formation of a function h mj o in order to 
evaluate a Tate pairing (see page 873) that meets the recitation of determining a plurality of 
functions hj, D that are iterative building blocks for the formation of a function h m ,D in order to 
evaluate v m which is a Squared Tate pairing. 

As per claim 14, the references as combined above disclose wherein said hyperelliptic 
curve C is over a field not of characteristic 2 (see D2, page 873). Claim 14 is therefore rejected 
on the same rationale as the rejection of claim 13 above. 

As per claim 15, the references as combined above disclose wherein for at least one 
element D of J(C), a representative for iD will be A.sub.i-g(P.sub.O), where A.sub.i is effective 
of degree (see D2, page 867, first paragraph). 

As per claim 29, the references as combined above disclose determining a Squared Tate 
Pairing for a hyperelliptic curves v.sub.m, for an m-torsion element D of a Jacobian J(C) and an 
element E of J(C), that meets the recitation of determining a Squared Tate Pairing for a 
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hyperelliptic curves v.sub.m, for an m-torsion element D of a Jacobian J(C) and an element E of 
J(C), with representatives (P.sub.l)+(P.sub.2)+ . . . +(P.sub.g)-g(P.sub.O) and 
(Q.sub.l)+(Q.sub.2)-f . . . +(Q.sub.g)-g(P.sub.O), respectively, with each P.sub.i and each Q.sub.j 
on the curve C, with P.sub.i not equal to .+-.Q.sub.j for all i,j, determining that vm ( D , E ) := ( h 
m,D((Ql)-(.Ql) + (Q2)-(-Q2) + + (Qg)-(-Qg)) q - ,/m (see Dl, page 1718, 
column 2) and (D2, page 873). This claim is also rejected on the same rationale as the rejection 
of claim 16 above. 

As per claims 30-32 and 46, claims 30-32 and 46 recite the same limitations as claims 
13-15 and 29 respectively except for implementing the claimed method into a storage medium. 
Dl discloses (page 1719, part III first paragraph) using a computer to implement the Tate 
Pairing. Therefore claims 30-32 and 46 are rejected on the same rationale as the rejection of 
claims 13-15 and 29. 

As per claim 47, Dl substantially teaches an apparatus (computer) comprising memory 
configured to store information suitable for use with using a cryptographic process; logic 
operatively coupled to said memory and configured to calculate at least one Squared Tate pairing 
(see page 1719, part III first paragraph) for at least one hyperelliptic curve (see page 1719, left 
column first two paragraphs) showing computation of Tate pairing for a hyperelliptic curve as 
mentioned on (see page 1718, left column, last paragraph prior to part II). Claim 47 also 
contains the same limitations as claim 13. Claim 47 is therefore rejected on the same rationale as 
the rejection of claim 13. 
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As per claims 48-49 and 63, claims 48-49 and 63 recite the same limitations as claims 
14-15 and 29 respectively except for implementing the claimed method into a claimed apparatus 
as disclosed in claim 47. Therefore claims 48-49 and 63 are rejected on the same rationale as the 
rejection of claims 14-15 and 29 and claim 47. 

5. Claims 16-28, 33-45, and 50-62 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Non-Patent Literature to Gerhard Frey, Michael Muller, and Hans-Georg 
Ruck; "The Tate Pairing and the Discrete Logarithm Applied to Elliptic Curve Cryptosystems" 
IEEE TRANSACTIONS ON INFORMATION THEORY, VOL. 45, NO. 5, JULY 1999; Pages 
1717-1719 (hereinafter Dl) in view of Non-Patent Literature to Gerhard Frey, Michael Muller, 
and Hans-Georg Ruck; "Remark concerning m-Divisibility and the Discrete Logarithm in the 
Divisor Class Group of Curves"; Pages 865-874 (hereinafter D2) (Applicant IDS) as applied to 
claim 13 and further in view of Non-Patent Literature to Barreto et al "Efficient Algorithms for 
Pairing-Based Cryptosystems" (Applicant IDS) . 

As per claim 16, D2 discloses subtraction chain and further discloses in an example on 
page 866 adding an inverse of (xl, yl) is represented in the form (x2, -y2) and since hyperbola is 
used it is implicit that if a point P=(x, y) occurs in A and y.noteq.O, then -P:=(x,-y) does not 
occur in A as interpreted by the Examiner (this interpretation is explained in Barreto et al by 
definition, page 4) that meets the recitation of -P denotes a point -P:=(x, -y), and wherein if a 
point P=(x, y) occurs in A and y.noteq.O, then -P:=(x,-y) does not occur in A. Therefore, it 
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would have been obvious to one of ordinary skill in the art at the time the invention was made to 
modify Dl and D2 to apply the rules as disclosed in Barreto so as to define the point P as -P:=( x > 

-y). 

As per claim 17, the references as combined above disclose associating two polynomials 
ala2 which meets the recitation of a representative A.sub.i, associating two polynomials (a.sub.i, 
b.sub.i) which represent a divisor (see D2, page 873). This claim is rejected on the same 
rationale as the rejection of claim 16 above. 

As per claim 18, the references as combined above disclose determining D as an m- 
torsion element of J(C) (see Dl, page 1718, column 2) and (see D2, page 873). This claim is 
rejected on the same rationale as the rejection of claim 16 above. 

As per claim 19, the references as combined above disclose if j is an integer, then 
h.sub.j,D=h.sub.j,D(X) denoting a rational function on C with divisor (h.sub.j,D)=jA.sub.l- 
A.sub.j-((j-l)g)(P.sub.O) (see D2, page 873). This claim is rejected on the same rationale as the 
rejection of claim 16 above. 

As per claim 20, the references as combined above disclose wherein D is an m-torsion 
divisor and A.sub.m=g(P.sub.O), and a divisor of h.sub.m,D is (h.sub.m,D)=mA.sub.l- 
mg(P.sub.O) (see D2, page 873). This claim is rejected on the same rationale as the rejection of 
claim 16 above. 
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As per claim 21, the references as combined above disclose wherein h.sub.m,D is well- 
defined up to a multiplicative constant (see D2, page 873). This claim is rejected on the same 
rationale as the rejection of claim 16 above. 

As per claim 22, the references as combined above disclose evaluating h.sub.mJD at a 
degree zero divisor E on said hyperelliptic curve C, wherein E does not contain P.sub.O and E is 
prime to A.sub.i. (see D2, page 873). This claim is rejected on the same rationale as the rejection 
of claim 16 above. 

As per claim 23, the references as combined above disclose wherein E is prime to 
A.sub.i for all i in an addition-subtraction chain for m. (see D2, page 873). This claim is rejected 
on the same rationale as the rejection of claim 16 above. 

As per claim 24, the references as combined above disclose wherein given A.sub.i, 
A.sub.j, and A.sub.i+j, further comprising determining a function u.sub.i j such that a divisor of 
u.sub.ij is (u.sub.ij)=A.sub.i+A.sub.j-A.sub.i+j-g(P.sub^O) (see.D2, page 866, paragraph 2 
which meets the claimed limitation for instance for i=l and j=2 and see also page 868, (examples 
of hyperelliptic curve). Barreto et al further discloses bilinearity (see pages 4 and 8). This 
claim is also rejected on the same rationale as the rejection of claim 16 above. 
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As per claim 25, the references as combined above disclose evaluating h.sub.j,D(E) for 
j=l that meets the recitation of evaluating h.sub.j,D(E) such that when j=l, h.sub.l,D is 1 (see 
D2, page 873). 

As per claim 26, D2 discloses wherein given A.sub.i, A.sub.j, h.sub.i,D(E) and 
h.sub.j,D(E), evaluating u.sub.ij = A.sub.i+A.sub.j-A.sub.i+j-g(P.sub.O) (see D2, page 866, 
paragraph 2 which meets the claimed limitation for instance for i=l and j=2 and see also page 
868, (examples of hyperelliptic curve). See also equation on page 873 Ai in the form of ID and 
function iD, hi(E); it only requires routine skill in the art to use two variables from this equation 
to derive A.sub.i, A.sub.j, h.sub.i,D(E) and h.sub.j,D(E). Barreto et al further discloses 
bilinearity (see pages 4 and 8) and discloses evaluating f sub a+b, of P and Q (see pages 7-8, 
section 5) that meets the recitation of h.sub.i+j,D(E)=h.sub.i,D(E)h.sub.j,D(E)u.sub.i,j(E). This 
claim is also rejected on the same rationale as the rejection of claim 16 above. 

As per claim 27, the references as combined above disclose determining a function 
(u.sub.i,j)=A.sub.i+A.sub.j-A.sub.i+j-g(P.sub.O) (see D2, page 866, paragraph 2 which meets the 
claimed limitation for instance for i=l and j=2 and see also page 868, (examples of hyperelliptic 
curve). Barreto et al further discloses bilinearity (see pages 4 and 8). This claim is also rejected 
on the same rationale as the rejection of claim 16 above. 

As per claim 28, the references as combined above disclose the claimed method of claim 
27. D2 discloses on pages 865-866 A.sub.i+A.sub.j-A.sub.i+j-g(P.sub.O) which meets the 
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recitation of wherein g=2 and (u.sub.iJ)=A.sub.i-f-A.sub.j-A.subi+j-2(P.sub.O) and discloses 
finding the divisor between Al, A2, and A3 (see D2, page 866). It is apparent to one of ordinary 
skill in the art that using the equation A.sub.i+A.sub.j-A.sub.i+j-g(P.sub.O) of D2 and the Cantor 
algorithm different values of g would satisfy if the degree of a.sub.new is greater than 2, 
otherwise, u.sub.i j is determined as u.sub.i,j(X):=d(x(X)), wherein d(x) is the greatest common 
divisor of three polynomials (a.sub.i(x), a.sub.j(x), b.sub.i(x)+b.sub.j(x)). This claim is also 
rejected on the same rationale as the rejection of claim 16 above. 

As per claims 33-45, claims 33-45 recite the same limitations as claims 16-28 
respectively except for implementing the claimed method into a storage medium. Dl discloses 
(page 1719, part III first paragraph) using a computer to implement the Tate Pairing. Therefore 
claims 33-45 are rejected on the same rationale as the rejection of claims 16-28. 

As per claims 50-62, claims 50-62 recite the same limitations as claims 16-28 
respectively except for implementing the claimed method into a claimed apparatus. Therefore 
claims 50-62 are rejected on the same rationale as the rejection of claims 16-28. 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. (See PTO-Form 892). 
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